Check Point Remote Access VPN and Mobile Access Authentication Bypass Vulnerability (CVE-2026-50751) Security Advisory

1. Apply Official Hotfixes

Visit the Check Point Support Center (sk185033) to download and install the appropriate security hotfix for your Gaia OS version.

2. Temporary Mitigation (Disable IKEv1 & Transition to IKEv2)

If immediate patching is not feasible, disable the deprecated IKEv1 protocol and enforce the use of IKEv2.

Check Point SmartConsole Configuration Steps:

• Log in to SmartConsole.
• Go to Gateways & Servers and double-click the target VPN Gateway.
• Navigate to IPsec VPN.
• Under VPN Advanced settings, restrict the Key Exchange method to IKEv2 Only.
• Save and Install Policy to apply the changes to the gateway.

This vulnerability (CVE-2026-50751) stems from a logic flow weakness in certificate validation within the deprecated IKEv1 key exchange protocol used by Check Point Remote Access and Mobile Access VPNs (CWE-287).

An unauthenticated remote attacker can exploit this flaw to bypass the user authentication phase entirely, establishing a remote access VPN connection without providing a valid user password. With a CVSS score of 9.3, this vulnerability is classified as Critical and has been added to the CISA KEV catalog due to active exploitation in the wild. Successful exploitation grants the attacker direct access to the internal network, potentially leading to lateral movement and further compromise.